Malicious packages
Malware feed
Every package version published with malicious code, federated from OSV.dev's MAL-* feed: GitHub malware advisories, Snyk, PyPI removed-malware, OSS-Fuzz, and others. These are not CVE-style vulnerabilities — they're intentionally malicious uploads (typosquats, compromised maintainer tokens, worm-style campaigns like Shai-Hulud).
Recent advisories
364,627 total · sorted newest first- Aug 14, 2025
Malicious code in quill-aabek-x41jv-zephyr-project (npm)
- Aug 14, 2025
Malicious code in quill-9aaa6-trbiq-zephyr-project (npm)
- Aug 14, 2025
Malicious code in quickyfit (npm)
- Aug 14, 2025
Malicious code in quicktune (npm)
- Aug 14, 2025
Malicious code in quicktun (npm)
- Aug 14, 2025
Malicious code in quickstart-mobile-server (npm)
- Aug 14, 2025
Malicious code in quicksilver_9t114_rphhy_honey (npm)
- Aug 14, 2025
Malicious code in quicksilver_68c7s_7oj7d_zenith (npm)
- Aug 14, 2025
Malicious code in quicksilver-mapbl-yosmr-bison-project (npm)
- Aug 14, 2025
Malicious code in quicksilver-lsmzm-hmnfc-ember-project (npm)
- Aug 14, 2025
Malicious code in quicks (npm)
- Aug 14, 2025
Malicious code in quickmud (npm)
- Aug 14, 2025
Malicious code in quick-start_onnxruntime-node (npm)
2 compromised versions
- Aug 14, 2025
Malicious code in quick-start (npm)
- Aug 14, 2025
Malicious code in quick-old-grep-virtualize-xml (npm)
- Aug 14, 2025
Malicious code in quick-code-balance-spy-java (npm)
- Aug 14, 2025
Malicious code in quicbooks (npm)
- Aug 14, 2025
Malicious code in qui-theme-builder (npm)
- Aug 14, 2025
Malicious code in queue-firebase (npm)
- Aug 14, 2025
Malicious code in queue-consumer-cg (npm)
- Aug 14, 2025
Malicious code in querynews (npm)
- Aug 14, 2025
Malicious code in query_response-active_record (npm)
- Aug 14, 2025
Malicious code in query_response (npm)
- Aug 14, 2025
Malicious code in query_layer-active_record (npm)
- Aug 14, 2025
Malicious code in query-sudo-web-yaml-iota (npm)
- Aug 14, 2025
Malicious code in query-simple-hot-sanitize-balance (npm)
- Aug 14, 2025
Malicious code in query-repository-ora-magellan (npm)
- Aug 14, 2025
Malicious code in query-kuiperbelt-blitz-eslint-plugin (npm)
- Aug 14, 2025
Malicious code in query-iota-import-double-sed (npm)
- Aug 14, 2025
Malicious code in query-hydra-postcss-loader-config (npm)
- Aug 14, 2025
Malicious code in query-emulate-stack-unix-phi (npm)
- Aug 14, 2025
Malicious code in querona (npm)
- Aug 14, 2025
Malicious code in quercus-xenon-elz3 (npm)
- Aug 14, 2025
Malicious code in quercus-uniform-ryu5 (npm)
- Aug 14, 2025
Malicious code in quercus-raspberry-qpdd (npm)
- Aug 14, 2025
Malicious code in quercus-ginkgo-reeq (npm)
- Aug 14, 2025
Malicious code in queensu (npm)
- Aug 14, 2025
Malicious code in quebec-zzn-project (npm)
- Aug 14, 2025
Malicious code in quebec-zulu-jsje (npm)
- Aug 14, 2025
Malicious code in quebec-zulu-cherry-zjmnf (npm)
- Aug 14, 2025
Malicious code in quebec-zucchini-zczj (npm)
- Aug 14, 2025
Malicious code in quebec-yam-watermelon-hdrth (npm)
- Aug 14, 2025
Malicious code in quebec-xray-golf-kupou (npm)
- Aug 14, 2025
Malicious code in quebec-xigua-yam-gvssv (npm)
- Aug 14, 2025
Malicious code in quebec-whiskey-nssb (npm)
- Aug 14, 2025
Malicious code in quebec-whiskey-fig-yjeyc (npm)
- Aug 14, 2025
Malicious code in quebec-wbf-project (npm)
- Aug 14, 2025
Malicious code in quebec-victor-grape-zmatj (npm)
- Aug 14, 2025
Malicious code in quebec-vgq-project (npm)
- Aug 14, 2025
Malicious code in quebec-vanilla-drmi (npm)
Page 5795 of 7,293